$ rpki-client -vvf rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft File: B7vs0OoIn8ZO4UDdyN26UufZENA.mft (raw, json) Hash identifier: 6n44bnyI1RgIFLX7ELw40M0aEJULU9/arBgpfK0xZLc= Subject key identifier: 35:65:97:AA:FA:05:53:C2:4D:F3:46:A2:7C:0B:53:E5:46:82:64:41 Authority key identifier: 07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0 Certificate issuer: /CN=A912E64A/serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0 Certificate serial: 060C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft Manifest number: 0600 Signing time: Fri 22 Aug 2025 23:04:08 +0000 Manifest this update: Fri 22 Aug 2025 23:04:07 +0000 Manifest next update: Fri 29 Aug 2025 23:04:07 +0000 Files and hashes: 1: B7vs0OoIn8ZO4UDdyN26UufZENA.crl (hash: YCWZRhCzfrpqKguyB1prf2Zl/0q27uVPunNJFGb2NFw=) 2: 55B56780BABA11EB8A51C234C4F9AE02.roa (hash: 4+8EOl0IVC0WYPREjgU4SQ2gBQ7SWbeC1nS8R2xM7hU=) 3: 55056D1CBABA11EB8A51C234C4F9AE02.roa (hash: Jks+wAurz0A89wXrN9oPKVJZcdKUluPelZM2Gsz3YvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1548 (0x60c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E64A, serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0 Validity Not Before: Aug 22 23:04:07 2025 GMT Not After : Aug 29 23:04:07 2025 GMT Subject: CN=68a8f768-3cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9f:a2:6b:80:8f:37:bd:dd:ef:18:69:29:17: 93:9a:52:45:df:c5:4c:4e:84:52:7d:6a:06:4e:04: 0e:6a:13:ae:91:b1:48:54:b8:a2:24:bb:7b:52:f0: 10:19:9c:dc:c3:95:59:48:ab:fb:b3:5f:9c:57:8e: 11:da:a3:88:59:e0:2d:36:a8:55:79:2b:c7:0a:16: 51:ab:5d:d9:45:81:ac:68:47:02:ec:eb:76:59:3a: 65:dc:9c:f6:99:1b:a3:57:22:e4:b1:3d:64:d0:64: d1:df:3a:cd:5c:8e:14:d5:ab:78:fb:56:33:1b:43: 71:53:41:3e:a9:14:d5:aa:27:2e:3d:c9:96:3d:f0: 79:d2:b9:00:21:8f:32:b0:c3:75:8c:d6:1a:2f:f6: 72:12:a7:59:25:64:d7:42:9e:aa:72:9b:dd:16:82: b3:14:ab:99:5d:3c:eb:94:74:bf:0b:68:d5:c5:f8: 65:4e:0f:f6:82:48:87:d2:2c:d5:eb:23:fe:7e:fa: d0:03:fa:af:b1:5b:ae:10:76:43:82:07:63:6c:22: 50:2a:17:5c:cf:e6:9c:93:3e:5a:5f:5b:85:2d:c7: de:b6:33:25:b9:f7:0f:42:9b:d4:6d:16:dc:3f:af: ee:7e:00:f1:89:2d:7a:d1:0e:e4:74:40:36:73:3c: 4b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:65:97:AA:FA:05:53:C2:4D:F3:46:A2:7C:0B:53:E5:46:82:64:41 X509v3 Authority Key Identifier: keyid:07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:d3:77:6c:6a:f9:b8:05:df:a0:53:5d:51:7b:91:44:d8:68: d3:e0:f5:8b:a2:db:41:29:6f:d1:ea:1e:56:d3:0e:d5:12:f5: cd:7a:f7:a5:03:c2:ed:bb:3e:39:a8:d8:6e:0b:0d:90:8f:3c: 90:e6:e4:98:a7:78:ca:31:df:6f:9e:1e:f6:f8:74:20:2a:60: d6:ed:ae:9c:44:b8:07:0d:8e:0b:42:68:a3:e5:b5:ef:05:32: 0e:55:14:2b:2d:fd:0f:76:2b:74:17:9f:7f:05:7e:f4:a5:a6: 5c:1d:9c:90:d5:ec:a0:ba:ac:64:12:e3:c5:c2:92:5e:53:5b: 7f:f7:0b:2e:88:6f:2b:e2:c3:ae:a0:40:5e:17:0b:9f:9e:35: 30:6a:60:54:a5:3a:58:2f:18:7a:b2:c5:7c:8e:92:cb:7a:e7: 1b:2a:32:35:2e:05:d1:24:d1:b3:10:d1:29:ee:76:38:73:82: 3f:c5:32:99:e2:a4:72:14:b1:80:d8:32:ed:c4:87:69:d7:8a: fd:ee:8e:9b:b3:cf:70:d2:ee:95:34:f0:76:e3:27:eb:b2:93: bc:ae:ec:57:d4:67:97:0b:1f:f8:a2:42:8a:a4:07:ce:28:80: d4:c2:03:de:ac:43:16:43:1b:75:53:c8:26:1e:ea:8e:97:5e: 80:28:46:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU2NEExMTAvBgNVBAUTKDA3QkJFQ0QwRUEwODlGQzY0RUUxNDBEREM4RERCQTUy RTdEOTEwRDAwHhcNMjUwODIyMjMwNDA3WhcNMjUwODI5MjMwNDA3WjAYMRYwFAYD VQQDEw02OGE4Zjc2OC0zY2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvp+ia4CPN73d7xhpKReTmlJF38VMToRSfWoGTgQOahOukbFIVLiiJLt7UvAQ GZzcw5VZSKv7s1+cV44R2qOIWeAtNqhVeSvHChZRq13ZRYGsaEcC7Ot2WTpl3Jz2 mRujVyLksT1k0GTR3zrNXI4U1at4+1YzG0NxU0E+qRTVqicuPcmWPfB50rkAIY8y sMN1jNYaL/ZyEqdZJWTXQp6qcpvdFoKzFKuZXTzrlHS/C2jVxfhlTg/2gkiH0izV 6yP+fvrQA/qvsVuuEHZDggdjbCJQKhdcz+ackz5aX1uFLcfetjMlufcPQpvUbRbc P6/ufgDxiS160Q7kdEA2czxLBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVll6r6 BVPCTfNGonwLU+VGgmRBMB8GA1UdIwQYMBaAFAe77NDqCJ/GTuFA3cjdulLn2RDQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTY0QS9DQ0NBNUY1RUJB QjcxMUVCQTMwMjk0MkRDNEY5QUUwMi9CN3ZzME9vSW44Wk80VURkeU4yNlV1ZlpF TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I3dnMwT29JbjhaTzRVRGR5TjI2VXVmWkVOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTY0QS9DQ0NBNUY1RUJBQjcxMUVCQTMwMjk0MkRDNEY5QUUwMi9CN3ZzME9vSW44 Wk80VURkeU4yNlV1ZlpFTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV03dsavm4Bd+gU11Re5FE2GjT4PWLottBKW/R6h5W0w7VEvXNevel A8Ltuz45qNhuCw2QjzyQ5uSYp3jKMd9vnh72+HQgKmDW7a6cRLgHDY4LQmij5bXv BTIOVRQrLf0Pdit0F59/BX70paZcHZyQ1eyguqxkEuPFwpJeU1t/9wsuiG8r4sOu oEBeFwufnjUwamBUpTpYLxh6ssV8jpLLeucbKjI1LgXRJNGzENEp7nY4c4I/xTKZ 4qRyFLGA2DLtxIdp14r97o6bs89w0u6VNPB24yfrspO8ruxX1GeXCx/4okKKpAfO KIDUwgPerEMWQxt1U8gmHuqOl16AKEb5 -----END CERTIFICATE-----Generated at Sat Aug 23 13:51:56 2025 by rpki-client